Reporting to the VP of Technical Operations, the full-time Information Security Lead will architect and enhance the security and compliance framework of the Concentriq platform, focusing on vulnerability management, incident response, and integrating AI tools to optimize security operations in a remote setting. Key responsibilities Manage and evolve vulnerability management tooling, reporting, and remediation governance Serve as a consultative security leader for Engineering, Product, and Customer teams, ensuring security-first system designs and implementations Oversee incident response preparation and execution, ensuring effective communication and thorough post-incident analysis Required qualifications 5+ years of experience in information security with a focus on GRC programs Proven expertise in regulatory frameworks such as ISO 27001, SOC 2, GDPR, and HIPAA Hands-on experience with vulnerability management tools and incident response Experience embedding security into software development lifecycles (DevSecOps principles) Familiarity with cloud-native environments, preferably AWS